A major supply chain attack has compromised 500-1,000 e-commerce websites through 21 backdoored Magento extensions from three vendors: Tigren, Meetanshi, and MGS. The malicious code, inserted as far back as 2019, remained dormant until April 2025 when attackers activated it. The backdoor, ...
A supply chain attack has compromised the xrpl.js library, a widely-used JavaScript API for XRP Ledger blockchain interactions. Malicious code in versions 4.2.1-4.2.4 and 2.14.2 was designed to steal cryptocurrency private keys and transmit them to an external domain. The attack began Apri...
A malicious npm package called "pdf-to-office" has been discovered targeting cryptocurrency wallets in a supply chain attack. Despite appearing as a PDF conversion tool, the package compromises Atomic Wallet and Exodus cryptocurrency software by replacing legitimate files with trojanized v...
A sophisticated Triada trojan variant has been found preinstalled on thousands of new counterfeit Android smartphones, primarily affecting Russian users. The malware operates from device RAM and system framework, making removal nearly impossible without reflashing. It can steal social medi...
Coinbase was the primary target in a sophisticated GitHub Actions supply chain attack that compromised hundreds of repositories. Attackers first breached the reviewdog/action-setup@v1 GitHub Action to dump CI/CD secrets from workflow logs, then used a stolen Personal Access Token to inject...
